Small practical question, in Amazon's S3, can you set individual objects to private via ACL if you have a public bucket policy? I mean, I know you can, but which one takes precedence?
Small practical question, in Amazon's S3, can you set individual objects to private via ACL if you have a public bucket policy? I mean, I know you can, but which one takes precedence? No comments
@Gargron S3 ACL is a simpler legacy mechanism, a DENY always has priority on an ALLOW for the same object. Also if you make a bucket public but restrict access to some objects through ACL, it supposes to work as intended. But my recommendation would be not to set a bucket public if not all of its content should be public as well as using IAM instead of ACL:
[DATA EXPUNGED]
|
@Gargron via ACL? I don’t know about via ACL, but definitely yes with an IAM policy